What are some best practices for verifying the security of internally developed code?

like
Posting as :
works at
You are currently posting as works at

Following. Is this a desktop app or web app? For web, Have you reviewed the OWASP policies ? From there , you can look up tools like snyk , sonar cloud etc as potential security dashboard tools to monitor your site for application vulnerabilities in real time

helpful

We run sonar against our dev and test environments.

Sonar for code quality
Snyk for libraries
Fortify for static scan of the code
Penetration testing tools (cant recall the names) for testing systems as blackbox

helpful

Related Posts

like

Any thoughts on threat intelligence certs? Which ones are most worth the effort?

like

Anyone have experience exiting to a biotech with no commercial products? PH I/II lead asset targeting multiple indications. Pros and cons?

like

Anyone here know/work at Facebook? Recently applied to a program there and would love to connect and chat further

like

Hi all,

I joined FIS recently and I want to access outlook and teams in mobile. If anyone knows settings please DM me. It's something very urgent.

Thanks!

like

Best day hike around DC area?

like

FWA - worth it or not? Also, would you mind sharing what your current arrangement is or what you’ve tried in the past and what worked/didn’t work?

like

Anyone still in Nano (Raiblocks)? 🔮what is the future looking like for this? 🔮

like

Any tips on negotiating discretionary bonus with your annual performance review?

like

My background is in tech transactional. I joined a cybersecurity SaaS startup at the end of last year and now also handle more generalist matters in addition to all things commercial-related. I have a number of books on contracts that I’ve found super helpful over the years (The Tech Contracts Handbook, A Manual of Style for Contract Drafting, Sign Here, etc.). Can anyone recommend books they’ve found helpful for L&E matters, privacy matters, product matters, or marketing/advertising matters?

like

Guys pls advise me, urgent query

Post Photo
like

I️ am pursuing a Product Management Internship in Big Tech for next summer. I️ am comfortable reaching out to people to network and know who to reach out to. However, I️ have not found the convos to be all that helpful. Any advice on how to make these convos useful?

like

Hello guys, I need some likes for enabling DMs. If you pass through this message please drop a like. Thank you!

like

Would you pay for a match making service that would be based upon video profiles instead of written profiles? I have not seen this concept created yet.

like

Hello fishes,
Does anyone have any idea on how much time Amdocs take to mail the result of the technical interview?

Hello there, I'm applying to SC academy in UAE ..
I passed the first interview, now the next one is presentation and I'm waiting the requirements and details from them,

please any advice or tips ? and how much is the expected salary for solution consultant there in service now SC academy ?

like

GDS didn’t receive this message…

Post Photo
funnylike

Does anyone want a ticket to the Mets/Phillies game

like

How do filmmakers find investors?

like

Additional Posts in Software Engineering

Trying to learn how to automate work using python. The specific task I wanna do is using information from a different webstie to create zendesk tickets. Any good resources I can use?
Thank you

Hello!
Does someone know how it is to work nowadays at LiveTiles? I have seen a lot of negative comments about management and the CEO, but I wonder how does it affect the engineering teams.

like

I'm a SWE from Italy. Love my country but salary and taxes here are outrageous. Got 2yrs experience in fullstack and data science, 2masters, a peer reviewed paper and outperform all my peers for 24k€ a year.
I'm thinkin about landing a remote SWE job (leetcoding and building a portfolio this summer).
Have you got some advice? Is it possible to work for US remotely without visa? What other countries pay well? Is it possible to land a 100k$+ with this kind of experience and working from Italy?

like

Has anyone working tech for a bank been laid off yet? Tech layoffs all over the media but no one is talking about developers at banks (who make up 1/3 of headcount in some cases)

like

What would your reaction be if the company you applied to asked for you to get permission from your current firm before moving forward? The situation is the company you're applying to is a client of your current firm, and you've already gone through the interview process with the new company. Thoughts?

like
like

Would like some tips on how to prepare for Senior Fullstack Developer tech interviews. What kind of questions should I expect? Any other tips on how to prepare? TIA

like

Hi all, asking on behalf of my SO. He’s currently in a backend engineer security role and wants to move into an infra related one. He’s in talks with his manager about moving internally in his current company but that is still in discussion. He just got an offer from another company for an infra role but they need an answer in the next week. How do you guys suggest he push for a decision from his manager about the internal move. Should he tell his manager he has another offer?

like

My husband is going through the interview process at Vanguard for an entry level software engineering role. He just graduated bootcamp but had been self studying for years as well. He's definitely junior level. What kinds of questions should he expect in his technical interview?

like

I'm working in the US under H1B, I got a chance to face an interview for another company. My current company started the PERM application also and results will be out within the next 3 months. Is it okay to transfer my H1B to a new company? Can my H1B transfer be denied? How long will my green card application delay if I move to a new company and start to apply for a green card from scratch?

like

First post, not sure if this is the best bowl to use but here goes. I’m wondering if anyone can share a bit about their experience working at MongoDB. I have seen they are hiring for many roles and am curious to hear about their experience. In particular, I would like to hear about software engineer roles. Currently I work on database engine C++ code and have seen some roles that indicate continuing down this stream would be possible with my skillset.

like

Started a new job this week. Very excited. My second tech job since doing a bootcamp and leaving my old career (police officer).

like

Okay, I feel like if a QE in India needs to email me, an SE, to just press the 'resolve' button on a user story that was created after a bug report was issued and fixed, then maybe... Just MAYBE... There might be a bureaucracy problem. 😒

likefunny

People of Color, how do you deal with an all-white team who doesn't acknowledge your (worthy) accomplishments while pats all incompetent employees?

likefunny

Our team is searching for a seasoned oracle developer specializing in retail/ecommerce, along with cloud exp. Fully remote. If your interested DM me.

like

What is the difference between a Software Engineer I and II? When do you know you're ready to leave your first great SE job? Is there a way to get more money without leaving? I've been at my current company for maybe and year and a half but I'm not sure if I'm good enough to leave yet. My manager always says I'm doing well and I got promoted from SE I to SE II a few months back. I'm not sure if it's imposter syndrome or not but I just don't feel confident about interviewing at other places

like

Just getting little depressed after being rejected from interview. Anyone else has the same feeling.Could have done better.

like

I have a technical interview with Google Software Engineering team. Anyone know what kind of questions they will ask? What are the best Google offices in the US or Canafa? are they flexible with remote work?

like

I am wanting to see where I fall in compensation for salary as a mid level software engineer. My base is 120k with 10k RSU. I also get a yearly bonus estimate about 18,000. This is my first job in tech as well so more than doubled what I made before was just curious. I'm in NM

like

Which is the more lucrative and flexible long term career path when comparing .NET development vs salesforce development.

By flexible I mean in terms of moving between positions, companies and technologies.

I've done both and am currently doing salesforce development but don't want to get pigeonholed.

like

New to Fishbowl?

Download the Fishbowl app to
unlock all discussions on Fishbowl.
That was just a preview…
Sign Up to see all discussions
  • Discover what it’s like to work at companies from real professionals
  • Get candid advice from people in your field in a safe space
  • Chat and network with other professionals in your field
Sign up in seconds to unlock all discussions on Fishbowl.

Already a user?
Login here

Share

Embed this post

Copy and paste embed code on your site

Preview

Download the
Fishbowl app

See what’s happening in your industry
from the palm of your hand.

A phone with Fishbowl app

Scan your QR code to download
Fishbowl app on your mobile

Download app

Sign up for free to view this conversation on Fishbowl

By continuing you agree to Terms of Use and Privacy Policy

Already have an account? Log in

Sign up for free to continue using Fishbowl

By continuing you agree to Terms of Use(New) and Privacy Policy(New)
Messaging rates may apply

Already have an account? Log in

For account settings, visit Fishbowl on Desktop Browser or

General

Legal